File: cert_verifier_policy_unittest.cc

package info (click to toggle)
chromium 138.0.7204.183-1~deb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm-proposed-updates
  • size: 6,080,960 kB
  • sloc: cpp: 34,937,079; ansic: 7,176,967; javascript: 4,110,704; python: 1,419,954; asm: 946,768; xml: 739,971; pascal: 187,324; sh: 89,623; perl: 88,663; objc: 79,944; sql: 50,304; cs: 41,786; fortran: 24,137; makefile: 21,811; php: 13,980; tcl: 13,166; yacc: 8,925; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (90 lines) | stat: -rw-r--r-- 3,517 bytes parent folder | download | duplicates (6)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chrome/browser/net/profile_network_context_service.h"
#include "chrome/common/pref_names.h"
#include "chrome/test/base/testing_profile.h"
#include "components/sync_preferences/testing_pref_service_syncable.h"
#include "content/public/browser/web_contents.h"
#include "content/public/test/browser_task_environment.h"
#include "content/public/test/test_web_ui.h"
#include "testing/gtest/include/gtest/gtest.h"

namespace chrome_browser_net {

class CertVerifierPoliciesTest : public testing::Test {
 public:
  void SetUp() override {
    TestingProfile::Builder builder;
    profile_ = builder.Build();
  }

 protected:
  content::BrowserTaskEnvironment browser_task_environment_;
  std::unique_ptr<TestingProfile> profile_;
};

// TODO(crbug.com/40928765): add tests for other fields as they are used by the
// Cert Management UI
#if !BUILDFLAG(IS_CHROMEOS)
TEST_F(CertVerifierPoliciesTest, ManagedPlatformIntegrationOn) {
  profile_->GetTestingPrefService()->SetManagedPref(
      prefs::kCAPlatformIntegrationEnabled,
      std::make_unique<base::Value>(true));
  ProfileNetworkContextService service(profile_.get());

  ProfileNetworkContextService::CertificatePoliciesForView policies =
      service.GetCertificatePolicyForView();
  ASSERT_TRUE(policies.is_include_system_trust_store_managed);
  ASSERT_TRUE(policies.certificate_policies->include_system_trust_store);
}

TEST_F(CertVerifierPoliciesTest, ManagedPlatformIntegrationOff) {
  profile_->GetTestingPrefService()->SetManagedPref(
      prefs::kCAPlatformIntegrationEnabled,
      std::make_unique<base::Value>(false));
  ProfileNetworkContextService service(profile_.get());

  ProfileNetworkContextService::CertificatePoliciesForView policies =
      service.GetCertificatePolicyForView();
  ASSERT_TRUE(policies.is_include_system_trust_store_managed);
  ASSERT_FALSE(policies.certificate_policies->include_system_trust_store);
}

TEST_F(CertVerifierPoliciesTest, UnmanagedPlatformIntegrationDefault) {
  ProfileNetworkContextService service(profile_.get());

  ProfileNetworkContextService::CertificatePoliciesForView policies =
      service.GetCertificatePolicyForView();
  ASSERT_FALSE(policies.is_include_system_trust_store_managed);
  ASSERT_TRUE(policies.certificate_policies->include_system_trust_store);
}

TEST_F(CertVerifierPoliciesTest, UnmanagedPlatformIntegrationOn) {
  profile_->GetTestingPrefService()->SetUserPref(
      prefs::kCAPlatformIntegrationEnabled,
      std::make_unique<base::Value>(true));
  ProfileNetworkContextService service(profile_.get());

  ProfileNetworkContextService::CertificatePoliciesForView policies =
      service.GetCertificatePolicyForView();
  ASSERT_FALSE(policies.is_include_system_trust_store_managed);
  ASSERT_TRUE(policies.certificate_policies->include_system_trust_store);
}

TEST_F(CertVerifierPoliciesTest, UnmanagedPlatformIntegrationOff) {
  profile_->GetTestingPrefService()->SetUserPref(
      prefs::kCAPlatformIntegrationEnabled,
      std::make_unique<base::Value>(false));
  ProfileNetworkContextService service(profile_.get());

  ProfileNetworkContextService::CertificatePoliciesForView policies =
      service.GetCertificatePolicyForView();
  ASSERT_FALSE(policies.is_include_system_trust_store_managed);
  ASSERT_FALSE(policies.certificate_policies->include_system_trust_store);
}

#endif

}  // namespace chrome_browser_net